Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier: LOLo3HYdUj4ArDA9+z6qiLkjSNG9AqnI0mPiyLWCEn8=
Subject key identifier: 52:6C:32:9D:8F:DB:42:FE:AF:16:EC:BB:94:B7:16:BC:85:DC:8C:36
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer: /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial: 019F194417CF5A1970581880B7D6C1E26C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number: 1985
Signing time: Tue 30 Jun 2026 16:02:00 +0000
Manifest this update: Tue 30 Jun 2026 16:02:00 +0000
Manifest next update: Wed 01 Jul 2026 16:02:00 +0000
Files and hashes: 1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: rrSnMay27YEko7PsU4mQl7UqqsHRf1No2Fr9bmmZ98c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:44:17:cf:5a:19:70:58:18:80:b7:d6:c1:e2:6c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Validity
Not Before: Jun 30 16:02:00 2026 GMT
Not After : Jul 1 16:02:00 2026 GMT
Subject: CN=526c329d8fdb42feaf16ecbb94b716bc85dc8c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:db:dd:1b:94:dd:16:03:f8:dd:60:c7:33:
52:2b:84:b6:14:31:47:b5:96:f3:3d:93:e6:34:ba:
76:63:bb:f2:b4:4c:0e:6b:2d:44:49:e5:db:7a:66:
06:2d:f7:a1:9f:46:49:ee:32:20:6e:9b:b0:94:f2:
66:ea:4f:d3:d5:8b:02:ee:21:78:3a:a4:78:be:af:
f8:3e:97:57:09:84:31:a5:52:67:c0:2c:e1:88:01:
10:dd:04:fc:05:0a:2a:50:88:98:5a:d9:30:b3:46:
73:8a:0b:f5:bf:71:db:cd:bd:4b:36:0c:97:86:82:
2c:b1:f1:da:fd:d5:c6:4b:9f:db:e8:d0:de:e4:4e:
b6:9f:78:20:74:93:df:af:ab:82:d6:d5:87:14:5a:
48:f8:88:55:0d:51:db:3e:74:34:fc:52:62:59:82:
66:4f:a5:70:eb:1d:00:d7:01:aa:2f:01:6a:3f:4b:
24:c1:1e:59:ff:20:63:f5:6e:bb:8b:8c:36:0d:e1:
c6:3c:77:66:8c:17:81:9f:12:d1:aa:e4:d0:1a:2c:
9f:08:e0:7e:b1:8c:ce:ac:7e:87:19:b9:55:7d:7b:
cb:a5:0f:ba:96:13:06:e5:36:51:b7:30:e6:68:7b:
b9:53:b6:91:de:2a:cd:0b:5a:2d:b4:5d:5d:e8:d2:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6C:32:9D:8F:DB:42:FE:AF:16:EC:BB:94:B7:16:BC:85:DC:8C:36
X509v3 Authority Key Identifier:
keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:55:22:8b:2b:42:22:fa:84:f2:35:3b:25:e7:24:22:df:29:
8d:94:95:79:0e:ef:58:d6:e9:14:68:89:47:0a:ce:36:8d:26:
11:28:7a:8c:3d:82:66:2f:e2:a2:a3:ea:9a:cb:c1:81:5c:bd:
f7:ca:76:63:11:17:2d:25:1c:6d:66:40:c6:11:f6:37:5d:62:
96:2e:b2:50:c7:e9:96:72:e5:f3:71:cb:79:d3:7e:c9:e8:ab:
9a:8f:25:b7:67:eb:0b:6d:fa:73:c3:c0:ad:de:34:0f:c7:e8:
f6:a1:05:80:e3:ca:56:50:11:eb:a8:a6:75:9e:4a:21:46:e6:
44:b1:06:d5:d3:fe:fa:4e:05:30:88:e3:0f:80:b8:75:1e:b8:
c0:bb:13:fc:71:53:c1:a8:43:54:95:16:76:6d:9d:14:3a:e3:
82:cc:4b:8b:04:99:5b:1c:06:d9:17:08:86:04:06:3b:1c:6c:
58:cb:0a:a2:ea:c2:d2:3a:a6:04:9a:c0:e7:d5:5f:3b:98:65:
85:f9:9a:dd:e8:1f:f1:0e:94:00:d6:2e:64:b7:36:d2:10:15:
77:9f:bb:ad:90:ef:87:92:08:b5:1d:a9:0e:b7:e2:5e:3f:bf:
e6:03:55:2a:56:c8:be:77:c3:67:1f:d5:8e:cf:cb:57:c9:e2:
fc:1f:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:08:56 2026 by rpki-client